This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
File: fRSfYkR4U2icEvsoiv62toHP68E.mft (raw, json)
Hash identifier: D0m5kzLXvyJEBqaksEZEfG5yHWbXk6/dhmkaf82MWS0=
Subject key identifier: A7:85:40:E6:BE:16:A9:42:60:F9:DD:C0:0A:9C:7F:79:1D:2E:0F:0A
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 019BF42C030049688D3E7CFC486F969ADC8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
Manifest number: 1788
Signing time: Sun 25 Jan 2026 08:01:23 +0000
Manifest this update: Sun 25 Jan 2026 08:01:23 +0000
Manifest next update: Mon 26 Jan 2026 08:01:23 +0000
Files and hashes: 1: 0iH43Q4bdkgLbnsEHNM0XIwWQ5s.roa (hash: bxo9OIZoi8IN/fQL03vCLDxAyd4172KoQ8X8ciK25Oc=)
2: 1-GwXcfVzYR8Z7ckHLVToL1Uaqps.roa (hash: d7SmTyDFUP/oRw3phzJwlnO6V1d5N7DrOlrvStN61JU=)
3: 5IBvYreu6crx1ZEw8lgWXelcFW4.roa (hash: QsG1NiQkvSH7jCRwmv7r4phufcd3rAtf4NV7t9+hYtM=)
4: 6ItGULV6j8ktSiDJcisut4L2uv8.roa (hash: AVoyJJSbMIzWkWm7Zhb8Q8AM52J+C55gsBmt2DwDqHk=)
5: 7VcC4DMXIHbrZKPirD4v2PDxiTo.roa (hash: 1QvS1I6O1u7fOlkBKmW3HFU8tJj8BM1PL1GfKM5aNaI=)
6: 8GnAqPanEF-aLifFEt28x_W5bDA.roa (hash: MVg0h+oZbG/5iMupvC5wE+JQeAtDrUL1XBd2HQzTeWA=)
7: 8azUINAdDrKjSOMgy-JPOT73XRM.roa (hash: ujWoSRBeAyaw5GwOHCWfKYVzWmHFO3uF5hNtrQu6Teg=)
8: 9C4zylgT_v6zvEFrHmvSaBqh2J0.roa (hash: wYzWFJkfh8DVoM0PQNgjA9QYBugmyzSdp/+Mt6aeNyY=)
9: ICrizZHzQ_4dOTzG5RjrMi2g3qE.roa (hash: 383sYSfBGHsf/cXc3Wodn3yKNQGJap1/pbI6fLtIstw=)
10: MDe6C8qEncFJW9Z_5GGUf8-NnXw.roa (hash: rK/554OfUglfPeqEoYZ9XaLl/qaRXFUHRWwU799kKDU=)
11: UgUlbA4Ymig1Dt7HwmQu6F99hKM.roa (hash: f9lP8pXxVTYPvjjr2VNmvzkO+lSuR++Kin/e+V01V5k=)
12: Uqw9Dlmoq1jySYJ2AjzEpmjf6Dw.roa (hash: Yj3I6/Qycmom0mdi7MnamZ5gOAsgybPCnXXKUt6eniM=)
13: WZU6FHFcHOx5fALoZimlHMooRJs.roa (hash: WpBGTEqhwHqD6YFmMFq/AcUePkWzvyP/nRmAiQbyO2E=)
14: dtGYKYc-L-yIv33hN65J3E-xajc.roa (hash: HGuRzP1yH6WASdpAyJlfci6458TQEkYZy6WuynkrmB8=)
15: e8VFBmIKoirMo9GQsY0TjoYVOaQ.roa (hash: GwJtd77us9EwOJjzXsDviq2QYdc35X858cXyCikITTk=)
16: fRSfYkR4U2icEvsoiv62toHP68E.crl (hash: I+w+aVxoG9WkoC83NZmXn3YLePdYLoj8hJdSoq/enrY=)
17: j8jqNDQZMqmi7QKl4s3v-vmRycc.roa (hash: EOZ1DSZzBL0cAYGwCaI3yGpoFvzn4nYkcA9KkiSGjio=)
18: nckzlZzEmCkRBssdIu4EBS5Mv74.roa (hash: eV7W/koRLQxtO7S8b9s+wve0BYE3rm3ca63LW1DOzxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Jan 2026 07:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:f4:2c:03:00:49:68:8d:3e:7c:fc:48:6f:96:9a:dc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: Jan 25 08:01:23 2026 GMT
Not After : Jan 26 08:01:23 2026 GMT
Subject: CN=a78540e6be16a94260f9ddc00a9c7f791d2e0f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:be:8b:07:d0:c7:65:38:a6:d1:9e:9a:ae:dd:
c5:2f:9a:b5:d3:9c:34:c0:29:8e:08:db:aa:e4:24:
45:b3:64:ee:73:ed:e2:15:01:70:73:1e:25:d5:69:
3c:56:e9:46:2b:13:f1:37:60:1a:05:19:d0:90:9d:
21:3f:d5:ad:79:95:f0:34:ac:b4:94:3a:49:7d:0d:
6a:d8:9d:de:0c:8c:6b:85:3b:d8:a3:03:d6:f5:bb:
ea:93:08:ae:8a:c3:58:0c:91:a3:06:57:42:62:91:
6b:96:85:75:22:e3:4f:92:00:f0:53:d3:2d:cb:3e:
44:b2:8a:bb:c1:39:41:20:bd:2d:e2:40:63:17:74:
58:a1:d2:61:57:b0:1f:b1:9e:94:38:fa:58:38:4f:
cf:e3:1a:32:3d:a0:fa:67:0a:5a:94:0c:07:46:17:
f0:41:1e:fb:7f:a6:5e:70:43:ba:24:56:b8:c8:5d:
6a:5d:f3:c6:8c:81:2d:4a:47:ca:b5:e3:1f:9e:89:
6d:03:1b:6e:eb:01:01:84:c3:bb:93:aa:c4:19:0e:
13:9f:3c:c9:da:8b:f9:fd:95:79:80:41:e2:2e:de:
86:9f:b6:b1:47:c5:85:13:fb:73:08:29:45:ad:09:
c1:a9:cc:a6:7c:2a:8c:d6:0a:55:e8:09:6a:fc:8f:
f0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:85:40:E6:BE:16:A9:42:60:F9:DD:C0:0A:9C:7F:79:1D:2E:0F:0A
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:50:a5:e0:3a:9c:f6:75:04:d4:35:11:b1:fd:14:79:5a:3f:
04:42:6e:99:78:0a:1d:fe:d1:d2:bd:fb:a4:36:77:55:cf:c7:
b6:7e:c5:44:e1:fd:cd:f2:08:c8:df:0c:63:7a:9b:05:0e:1c:
48:b7:97:90:93:64:61:e7:1a:e4:c7:6e:0a:08:f8:c1:8a:d8:
3c:14:95:b0:4f:91:25:cc:be:96:c8:f8:4f:02:84:b3:28:e8:
49:32:38:0f:c0:78:68:78:cb:47:2a:a5:cd:96:4d:e4:54:d3:
c1:15:9b:8b:e9:49:fd:49:44:a0:00:a2:89:29:36:c5:7a:b2:
f2:7f:69:92:cc:ba:58:13:ee:1b:69:cf:07:bf:f0:b4:4a:44:
d5:89:4f:eb:85:58:7d:15:b0:32:c6:fd:2d:a1:f0:cf:68:99:
27:fe:05:ac:d8:1d:5d:e0:be:8f:d5:29:a2:0d:a0:63:d7:5a:
4d:49:b9:69:b4:94:43:4d:1d:79:ca:4a:66:3e:c1:02:0d:61:
c7:f6:0a:9a:80:e6:84:b2:90:59:fa:74:36:0f:cd:dd:04:de:
27:9c:f8:08:cc:4b:5a:50:4a:45:ed:4c:28:bd:aa:91:9f:cb:
da:0c:f9:3e:3f:e9:5c:61:e2:05:c6:3f:4f:61:59:84:65:cb:
b8:77:ca:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 16:18:34 2026 by rpki-client